Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
File: sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft (raw, json)
Hash identifier: 6V3UsyZeIJk6ODxAky0i1d/XN62qDPBJxzRcjQ2GkUs=
Subject key identifier: 59:C2:0D:DE:7B:0C:30:93:55:02:C2:29:6A:B0:29:84:21:FD:C3:59
Authority key identifier: B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
Certificate issuer: /CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Certificate serial: 0194BABB6B3B77FEB9850A163D3354834266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
Manifest number: 1066
Signing time: Fri 31 Jan 2025 05:00:32 +0000
Manifest this update: Fri 31 Jan 2025 05:00:32 +0000
Manifest next update: Sat 01 Feb 2025 05:00:32 +0000
Files and hashes: 1: DLK7aUuoCrkixmfK1Tr6lgYywbs.roa (hash: P1mAikX7/iUCIq0Iyy8fvjfAyIPndaCCAY0oESDv+Qo=)
2: sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl (hash: gPT9EkI1LxTof6J+50+pHPDLvCiailqE6FySk+liBTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Feb 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ba:bb:6b:3b:77:fe:b9:85:0a:16:3d:33:54:83:42:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b132e935a10f9ce216e0993ae4199c96f5273af4
Validity
Not Before: Jan 31 05:00:32 2025 GMT
Not After : Feb 1 05:00:32 2025 GMT
Subject: CN=59c20dde7b0c30935502c2296ab0298421fdc359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:30:7e:e5:a3:91:c2:9c:e1:8d:ef:67:9e:
21:b2:d6:65:13:ea:79:1c:30:66:85:ed:a8:b2:62:
6e:7f:a5:8d:66:05:4f:43:df:c5:29:cc:90:9e:78:
a5:13:67:19:e2:4a:62:ec:bd:1a:13:69:1d:95:c1:
c5:be:d8:07:a5:47:2b:9e:52:ae:57:1b:c1:2e:e8:
07:99:4c:20:f1:24:f6:fc:1c:56:2a:8a:bb:38:b6:
80:72:de:48:c2:ae:b8:83:f2:c4:f7:85:42:26:ba:
6f:a5:a5:71:4f:42:a0:9a:8b:b3:48:6f:9e:f9:bc:
cb:27:eb:55:69:35:5b:61:d9:99:60:15:b7:27:9b:
ae:a9:d0:42:e3:de:65:b3:0e:a9:a9:66:43:56:62:
17:9b:df:d7:a3:c3:79:27:58:c3:46:21:22:20:eb:
e3:3e:0a:b4:2c:31:be:1e:21:57:c8:39:03:5c:d2:
4a:dc:10:5d:37:c0:50:04:4a:57:b3:e5:da:e9:79:
ac:2a:da:7c:44:d1:36:5b:3a:47:d0:55:1c:6a:86:
a2:05:dd:90:0d:88:fd:d8:d4:93:cf:17:25:85:1f:
98:58:d5:01:49:62:ff:32:d7:af:23:f7:ed:37:f7:
21:3f:38:12:bb:5a:d8:a5:51:de:2c:b8:df:05:52:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:0D:DE:7B:0C:30:93:55:02:C2:29:6A:B0:29:84:21:FD:C3:59
X509v3 Authority Key Identifier:
keyid:B1:32:E9:35:A1:0F:9C:E2:16:E0:99:3A:E4:19:9C:96:F5:27:3A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTLpNaEPnOIW4Jk65BmclvUnOvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b38821-23f2-4e5e-941c-a8f0ee00b2ad/1/sTLpNaEPnOIW4Jk65BmclvUnOvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:7e:53:3d:3f:4d:a7:9c:a7:0d:91:bb:92:77:ad:3d:ba:9f:
b5:e7:36:8f:09:e6:f8:71:77:f2:53:d3:be:86:19:6a:b6:dc:
7c:f1:6c:c1:48:cd:71:ab:96:0e:50:46:6d:3f:ee:57:e0:a6:
70:a0:00:88:50:bb:94:d1:63:8c:63:e8:06:58:8b:d7:4b:ab:
74:c8:c6:0b:0c:53:32:71:06:8f:63:f5:71:47:c0:0f:e5:35:
51:1d:b7:58:a8:78:79:ee:19:64:2b:13:22:79:ab:03:59:84:
5a:c6:74:1e:bd:0c:45:a7:bc:15:af:50:08:75:1a:3b:9a:a4:
c5:d4:94:52:f5:8a:99:91:19:7a:3a:2a:84:87:a8:52:0d:3b:
e0:09:66:39:4e:50:4a:86:86:d9:2e:b2:98:d5:28:47:92:42:
4c:74:ca:1c:70:a6:f9:e5:68:be:0a:c6:51:1a:70:dc:30:8f:
9b:45:67:a4:22:3b:cd:9f:d9:df:05:79:3d:74:70:45:4c:43:
d1:28:a7:38:2e:df:cc:fc:2f:41:40:13:9a:76:1f:9c:e2:e0:
0d:b5:38:11:c0:f6:71:1e:bc:96:f5:34:40:8f:4f:c8:73:86:
31:42:53:72:f9:4d:31:0d:74:23:7c:3c:d1:ac:fa:6b:1b:b4:
fe:79:57:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS6u2s7d/65hQoWPTNUg0JmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMzJlOTM1YTEwZjljZTIxNmUwOTkzYWU0MTk5Yzk2ZjUy
NzNhZjQwHhcNMjUwMTMxMDUwMDMyWhcNMjUwMjAxMDUwMDMyWjAzMTEwLwYDVQQD
Eyg1OWMyMGRkZTdiMGMzMDkzNTUwMmMyMjk2YWIwMjk4NDIxZmRjMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06gwfuWjkcKc4Y3vZ54hstZlE+p5
HDBmhe2osmJuf6WNZgVPQ9/FKcyQnnilE2cZ4kpi7L0aE2kdlcHFvtgHpUcrnlKu
VxvBLugHmUwg8ST2/BxWKoq7OLaAct5Iwq64g/LE94VCJrpvpaVxT0KgmouzSG+e
+bzLJ+tVaTVbYdmZYBW3J5uuqdBC495lsw6pqWZDVmIXm9/Xo8N5J1jDRiEiIOvj
Pgq0LDG+HiFXyDkDXNJK3BBdN8BQBEpXs+Xa6XmsKtp8RNE2WzpH0FUcaoaiBd2Q
DYj92NSTzxclhR+YWNUBSWL/MtevI/ftN/chPzgSu1rYpVHeLLjfBVKbTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnCDd57DDCTVQLCKWqwKYQh/cNZMB8GA1UdIwQY
MBaAFLEy6TWhD5ziFuCZOuQZnJb1Jzr0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMt
YThmMGVlMDBiMmFkLzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iMzg4MjEtMjNmMi00ZTVlLTk0MWMtYThmMGVlMDBiMmFk
LzEvc1RMcE5hRVBuT0lXNEprNjVCbWNsdlVuT3ZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARH5TPT9N
p5ynDZG7knetPbqftec2jwnm+HF38lPTvoYZarbcfPFswUjNcauWDlBGbT/uV+Cm
cKAAiFC7lNFjjGPoBliL10urdMjGCwxTMnEGj2P1cUfAD+U1UR23WKh4ee4ZZCsT
InmrA1mEWsZ0Hr0MRae8Fa9QCHUaO5qkxdSUUvWKmZEZejoqhIeoUg074AlmOU5Q
SoaG2S6ymNUoR5JCTHTKHHCm+eVovgrGURpw3DCPm0VnpCI7zZ/Z3wV5PXRwRUxD
0SinOC7fzPwvQUATmnYfnOLgDbU4EcD2cR68lvU0QI9PyHOGMUJTcvlNMQ10I3w8
0az6axu0/nlX7Q==
-----END CERTIFICATE-----
Generated at Fri Jan 31 15:44:32 2025 by rpki-client on console-fra.rpki-client.org